DIEBOLD NIXDORF, Inc

CYBERSECURITY. The Company has established an information security program, which requires cross-functional coordination between various departments including information security, information technology, data privacy, enterprise risk management and internal audit. Our information security program is generally guided in part by the National Institute of Standards and Technology (NIST) Cybersecurity Framework and International Organization for Standardization 27001 (ISO 27001) Framework. However, this does not mean that we will meet, or maintain, any particular technical standard, specification, framework, or requirement in the future, but rather we use NIST and ISO 27001 as guides to help the Company identify, assess and manage cybersecurity risks relevant to our business. Our program is designed to promote data security and operational resilience within our products, solutions, operations, and corporate infrastructure through layered safeguards, continuous monitoring, and risk-based controls. The Company conducts regular security risk assessments, which include internal, external, andthird-party risks, where appropriate, relying on internal and external resources. The results of these assessments help us to identify potential risks and to aid our cybersecurity risk management practices. Further, our employees receive annual training on security, privacy and the Company’s Code of Business Ethics. The Company maintains policies and practices governing our third-party risks, including service providers, suppliers and vendors. The Company generally requires third parties to, among other things, maintain security controls to protect confidential information and data, and notify us of data breaches that may impact our systems or data. The Company also uses third-party security scoring data to assess potential risks associated with third-party controls.

The oversight of our cybersecurity risk isintegrated into an enterprise-wide risk management process. The Board of Directors has oversight of our strategic and business risk management and has delegated cybersecurity risk management oversight to the Nomination and Governance Committee (Governance Committee) of the Board, which oversees the Company’s enterprise-wide risk management process. The Governance Committee provides risk oversight and guidance regarding strategy and management of the Company’s information security program, including cybersecurity incidents, if any. The Company’s management team is responsible for assessing and managing risks from cybersecurity threats, and in this regard, the Chief Information Security Officer (CISO) leads the Company’s overall cybersecurity function and cybersecurity leadership team. Our CISO is responsible for overseeing all information security programs that support key functions related to the operation and management of security controls designed to protect and defend against cybersecurity risks. Our current CISO has extensive experience in various roles related to information security. Our CISO leads a team of dedicated cybersecurity professionals who build and implement specific technical and administrative security controls. Our CISO regularly updates the Governance Committee on the state of Diebold Nixdorf’s cybersecurity program, including security risks, incidents and mitigation strategies.

In 2025, the Company did not identify any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents that have materially affected or are reasonably likely to materially affect the Company, including our business strategy, results of operations, or financial condition, but we cannot provide assurance that the Company will not be materially affected in the future by any cybersecurity incidents. For additional information about these risks, refer to the "Risk Factors" section in this annual report on Form 10-K.